Cybersecurity Risk Program Lead

Rubrik; Madison (WI); On-site; USD 163,000 - 272,000; Full time

Job summary

Rubrik is seeking a Manager, CyberSecurity Risk Management to drive the day-to-day execution of Rubrik’s cybersecurity risk program. You will coordinate cross-functional risk assessments, support risk review and remediation, and produce leadership-facing risk reports.

You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable risk-reduction outcomes. Strong program management and governance experience are essential.

Qualifications

• 8+ years of experience in cybersecurity risk management or GRC.
• Experience scaling a cybersecurity risk program in a fast-paced tech/SaaS/cloud company.
• Strong program management: planning, dependency management, effort estimation, status reporting, and cross-functional delivery.
• Solid knowledge of risk management methodologies (NIST RMF/800-37/800-30, ISO 27005, COBIT) and major frameworks (ISO 27001/2, SOC 2, FedRAMP, NIST CSF/800-53, CIS, PCI DSS, HIPAA).
• Technical understanding of cloud, identity, network, and application security.
• Excellent written and verbal communication, organization, and stakeholder management.
• Bachelor’s degree in Security, CS, MIS, or related field, or equivalent practical experience.

Responsibilities

• Support program operations for the Cybersecurity Risk Management Program.
• Conduct risk assessments and triage security issues related to Rubrik’s products and infrastructure.
• Draft risk statements translating findings into business impact with rationale.
• Maintain and update the risk register with ownership, status and dates.
• Coordinate cross-functional risk initiatives, manage timelines and actions.
• Drive remediation of risks to closure with risk owners and leadership reporting.
• Prepare materials for risk committee meetings and track decisions/actions.
• Collect and analyze KPIs/KRIs and build leadership dashboards.
• Support enterprise, technical, and third-party risk assessments at scale.
• Document evidence and validate control implementation with stakeholders.
• Map activities to compliance frameworks (ISO 27001, SOC 2, NIST, PCI, HIPAA) and emerging regs.
• Contribute to risk quantification for business prioritization.
• Support GRC tooling, automation, and AI initiatives with governance.

Skills

Program management

Risk assessment

Stakeholder communication

Agile project management

Jira/Confluence/Tableau

Education

Bachelor’s degree in Security, CS, MIS, or related field

Tools

Jira

Confluence

Tableau

Job description

Rubrik is seeking a Manager, CyberSecurity Risk Management to drive the day-to-day execution of Rubrik’s cybersecurity risk program. You will coordinate cross-functional risk assessments, support risk review and remediation, and produce leadership-facing risk reports.

You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable risk-reduction outcomes. Strong program management and governance experience are essential.